$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer File: 1c6fc533-f46c-474e-9480-56c3b0fb1938.cer (raw, json) Hash identifier: l4EJlUy1HTERPKyFE1ngHTasKwr4R25HW8l1lTo7c8c= Subject key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AC173F3103BF60466A5C41920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 12:45:24 +0000 Certificate not after: Mon 08 Nov 2027 13:45:24 +0000 Subordinate resources: IP: 195.85.88.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:73:f3:10:3b:f6:04:66:a5:c4:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 5 12:45:24 2025 GMT Not After : Nov 8 13:45:24 2027 GMT Subject: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:7f:2a:49:db:0f:d1:fd:ec:e2:de:00:6e: db:93:a7:52:be:f7:98:a7:b9:c2:f2:48:97:34:06: 1c:77:ac:9d:1d:3f:22:0a:23:da:79:ab:68:04:09: 82:84:03:2f:fe:30:fa:10:e3:50:39:61:83:67:fd: 9e:8a:2d:95:25:e7:8c:86:c9:c5:ec:9a:59:39:0f: 33:10:ea:98:bd:03:1c:68:4a:fa:4d:69:28:85:e3: 6e:8d:d3:23:05:71:79:83:dc:ff:d7:15:51:0b:d8: 12:84:43:5d:ad:35:72:96:ca:ed:f8:b7:04:a6:3f: 8a:b1:2b:3a:ee:57:61:2f:5a:e0:d2:e2:ab:09:92: d5:51:65:02:ad:9e:33:b5:47:0c:fb:12:4b:83:77: e1:d3:07:b6:f2:34:5c:a2:c2:b3:1c:94:4b:f8:43: d3:79:ee:8c:ff:9b:a8:a4:be:c6:7a:7f:7d:4b:bb: 65:93:21:3c:da:71:52:9f:9c:30:3d:47:51:7b:a2: 87:42:79:12:c3:89:e2:d3:d5:69:40:50:47:ec:b3: 2f:d8:5b:a2:6c:14:75:f7:c4:1f:73:3f:c6:18:3a: 02:c3:f9:74:69:d2:a3:68:85:74:c0:14:8e:44:ef: bc:ba:4b:7b:4c:bc:70:5e:2b:f6:f4:b7:3f:9b:e2: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 195.85.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:54:54:7d:93:d1:1f:8a:5a:45:71:57:e3:9d:41:36:0a:5b: 5d:61:06:e1:09:77:43:eb:7d:b7:b4:1c:fd:4a:13:7c:2d:4e: bb:f1:e2:79:5f:a7:05:9b:c1:95:27:79:4f:8f:26:2e:fc:49: 90:6b:8a:52:5a:13:73:c5:5c:1e:7c:b3:d0:de:7c:0f:7d:bd: e3:fa:4d:e4:cb:5d:f8:85:18:0b:78:9e:cb:2d:84:e8:bf:8c: f2:6d:df:b1:5c:86:4a:86:85:f7:a2:e4:b2:88:88:b4:6c:84: 65:d3:19:f8:9d:c9:9e:be:71:2d:26:d2:1d:5c:50:62:27:e5: e9:ff:38:ac:47:f4:ac:5f:34:f4:19:fd:3a:14:a9:b8:9c:c7: f1:a0:9c:08:ad:82:24:77:50:eb:38:cf:79:aa:e1:81:c9:69: 88:6d:e8:f5:a7:38:f6:e4:46:de:a6:16:12:67:4d:ce:ce:14: 84:83:08:7c:5c:45:62:93:6a:1d:c6:22:89:a1:9a:41:fa:ac: a0:02:55:2b:9f:42:d5:c7:a3:bc:9e:34:7f:b8:83:e5:52:17: 75:21:a4:1e:c5:ec:2a:e9:b4:76:b5:3b:d2:09:e0:a0:e0:71: 70:26:1c:1a:d5:85:fc:b5:19:d6:da:2f:73:0f:b0:c2:72:98: 2f:2a:ba:73 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErBc/MQO/YEZqXEGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgwNTEyNDUyNFoXDTI3MTEwODEzNDUyNFowLzEtMCsGA1UEAxMk MWM2ZmM1MzMtZjQ2Yy00NzRlLTk0ODAtNTZjM2IwZmIxOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaF/KknbD9H97OLeAG7bk6dSvveYp7nC8kiX NAYcd6ydHT8iCiPaeatoBAmChAMv/jD6EONQOWGDZ/2eii2VJeeMhsnF7JpZOQ8z EOqYvQMcaEr6TWkoheNujdMjBXF5g9z/1xVRC9gShENdrTVylsrt+LcEpj+KsSs6 7ldhL1rg0uKrCZLVUWUCrZ4ztUcM+xJLg3fh0we28jRcosKzHJRL+EPTee6M/5uo pL7Gen99S7tlkyE82nFSn5wwPUdRe6KHQnkSw4ni09VpQFBH7LMv2FuibBR198Qf cz/GGDoCw/l0adKjaIV0wBSORO+8ukt7TLxwXiv29Lc/m+Iu5QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEVIxuj47RkVSSpeLOW+/l4RLrXlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x YzZmYzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMzYjBmYjE5MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFjNmZjNTMzLWY0NmMtNDc0ZS05 NDgwLTU2YzNiMGZiMTkzOC8xYzZmYzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMzYjBm YjE5MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADDVVgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeFRUfZPRH4paRXFX451B NgpbXWEG4Ql3Q+t9t7Qc/UoTfC1Ou/HieV+nBZvBlSd5T48mLvxJkGuKUloTc8Vc Hnyz0N58D3294/pN5Mtd+IUYC3ieyy2E6L+M8m3fsVyGSoaF96LksoiItGyEZdMZ +J3Jnr5xLSbSHVxQYifl6f84rEf0rF809Bn9OhSpuJzH8aCcCK2CJHdQ6zjPearh gclpiG3o9ac49uRG3qYWEmdNzs4UhIMIfFxFYpNqHcYiiaGaQfqsoAJVK59C1cej vJ40f7iD5VIXdSGkHsXsKum0drU70gngoOBxcCYcGtWF/LUZ1tovcw+wwnKYLyq6 cw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:58 2025 by rpki-client